Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          6GNjuFteVBteZWFZN1NCQY0qpLSYcv/HnfP+Togf1GI=
Subject key identifier:   B0:7D:40:0B:7F:54:93:CD:A2:2E:3B:9A:3C:F1:CD:57:ED:1F:E8:C2
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       01A12BE98B3E84199DDD0E2F529E36F3559F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          1A9C
Signing time:             Sun 11 Oct 2026 17:01:27 +0000
Manifest this update:     Sun 11 Oct 2026 17:01:27 +0000
Manifest next update:     Mon 12 Oct 2026 17:01:27 +0000
Files and hashes:         1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: N1tkPCdjGS5H/zsm7iejYgT49TUxy5AEhOSI6x+fYRc=)
                          2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:e9:8b:3e:84:19:9d:dd:0e:2f:52:9e:36:f3:55:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: Oct 11 17:01:27 2026 GMT
            Not After : Oct 12 17:01:27 2026 GMT
        Subject: CN=b07d400b7f5493cda22e3b9a3cf1cd57ed1fe8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:56:6a:93:e2:0c:a3:67:eb:e3:9f:cf:02:
                    f8:64:5f:d0:52:4a:62:7c:0b:98:b2:48:9c:cf:47:
                    7e:53:af:4a:2f:f5:20:93:54:f3:aa:08:88:d8:e6:
                    81:7c:d2:05:aa:26:0a:3c:fb:c6:02:65:3c:24:6f:
                    87:d2:00:3a:bb:3d:e6:36:c6:21:ac:de:08:fa:3c:
                    d9:52:e9:a4:38:df:ed:3f:17:75:47:74:c8:a9:65:
                    e5:07:a7:a0:dc:68:64:ce:ff:ee:b0:cd:c8:19:39:
                    b1:f7:55:d3:58:8b:f9:0c:9f:a0:bb:9b:f9:01:82:
                    0f:04:50:bd:b5:bf:67:1d:e1:1f:23:49:57:5d:7c:
                    e4:1e:70:87:d1:7e:3d:b7:2e:33:5c:9e:a5:99:89:
                    9e:33:92:c8:ac:26:51:ab:b6:11:db:66:cd:91:2c:
                    e9:51:65:13:08:c4:8d:57:3a:1c:13:1d:6e:fe:90:
                    5b:7c:72:3a:d9:8c:44:7e:73:b8:e4:77:ea:23:16:
                    d9:c8:1c:b8:c8:3e:5b:bf:61:04:97:a0:21:2b:10:
                    d6:ce:47:56:82:48:07:de:14:92:da:d4:b7:ea:fc:
                    25:e6:0e:13:71:eb:40:5f:25:78:57:ed:28:1c:89:
                    00:3c:d4:20:e2:6f:a6:04:fb:5c:7f:6a:51:6d:6c:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:40:0B:7F:54:93:CD:A2:2E:3B:9A:3C:F1:CD:57:ED:1F:E8:C2
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:62:08:01:e6:34:3a:ee:7c:2a:88:08:43:cd:fa:12:21:56:
         8e:97:fc:12:eb:ff:9e:99:25:56:d5:4b:bb:db:5d:60:5f:ac:
         93:88:03:0f:2f:9c:57:68:0a:a4:b6:b9:ea:18:4d:b2:a3:b5:
         ff:35:28:57:0e:36:9d:41:a5:73:23:fb:36:38:27:aa:cc:4a:
         e3:db:de:4b:0f:4f:55:bd:66:78:7f:99:bb:1b:f4:53:1d:94:
         96:5c:c8:bf:18:70:3f:70:78:74:5c:62:4c:f3:03:94:ae:7d:
         59:f9:eb:aa:23:ed:2f:24:d7:a3:4e:b3:27:dc:7b:66:78:42:
         c5:a3:e6:d8:a0:a1:a2:b4:6f:79:a0:46:22:83:1a:52:dc:47:
         23:48:f1:27:72:14:f9:1a:b0:c0:79:74:2a:cb:38:b2:c8:20:
         b8:92:e4:03:13:1e:fa:f3:85:cc:b8:fd:70:73:7e:25:26:38:
         5d:3a:0a:78:b1:51:a6:fd:f9:63:8d:9a:29:81:a3:ea:33:ca:
         cb:d5:09:29:1a:c4:aa:f8:5a:5f:12:13:12:e3:94:54:4c:0e:
         13:0f:73:c2:76:99:35:16:97:75:24:22:e0:05:4c:5e:af:3a:
         12:9a:95:c0:f1:98:79:9d:85:d4:5d:2c:be:86:82:be:63:a2:
         26:14:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:49 2026 by rpki-client